)]}' { "log": [ { "commit": "31f7c5463448f83528bd771c2d978d940080c9fd", "tree": "50f31f88b626d9f0dc95b933439416adb019d580", "parents": [ "5accf6f1b739690f60277e881531d59debe04a22" ], "author": { "name": "Charlotte Brandhorst-Satzkorn", "email": "charlotte@satzkorn.com", "time": "Wed Feb 25 17:53:21 2026 -0800" }, "committer": { "name": "Russ Cox", "email": "rsc@golang.org", "time": "Sat Feb 28 02:47:43 2026 -0800" }, "message": "action.yml: pin action dependencies to full commit SHAs\n\nIn August 2025, GitHub introduced a feature which allows GitHub\nrepositories to enforce that Actions use SHA pinning. If enabled, all\nGitHub Actions, including their transitive dependencies, must use SHA\npinning in order to be allowed to run. Switching to SHAs for our Action\ndependencies allows repositories with this setting enabled to continue\nusing golang/govulncheck-action.\n\nFixes golang/go#75908\n\nChange-Id: I0ffe9a8f56bbfd87dc50136fc35b0fc58abb4206\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/749320\nAuto-Submit: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: Johan Brandhorst-Satzkorn \u003cjohan.brandhorst@gmail.com\u003e\nReviewed-by: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nReviewed-by: Russ Cox \u003crsc@golang.org\u003e\nTryBot-Bypass: Sean Liao \u003csean@liao.dev\u003e\n" }, { "commit": "5accf6f1b739690f60277e881531d59debe04a22", "tree": "043be77bb2a07fbb67625fedaf79fa44549f0510", "parents": [ "357ea4a5418cb457db33ccd168e28f68e075eba0" ], "author": { "name": "Akihiro Suda", "email": "akihiro.suda.cz@hco.ntt.co.jp", "time": "Wed Feb 11 08:51:44 2026 +0000" }, "committer": { "name": "Gopher Robot", "email": "gobot@golang.org", "time": "Thu Feb 12 09:26:03 2026 -0800" }, "message": "action.yml: update dependencies\n\n- actions/checkout: v4.2.2 -\u003e v6.0.1\n- actions/setup-go: v5.4.0 -\u003e v6.1.0\n\nSee:\n- https://github.com/actions/checkout/releases\n- https://github.com/actions/setup-go/releases\n\nNotable fixes:\n- https://github.com/actions/setup-go/pull/665\n\nChange-Id: I4885641c2e7d15c5362b3aab54c89d7a502ef2be\nGitHub-Last-Rev: 81e47c83ae36005a4244b3326362fedbd6e459be\nGitHub-Pull-Request: golang/govulncheck-action#8\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/726120\nAuto-Submit: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: Junyang Shao \u003cshaojunyang@google.com\u003e\nTryBot-Bypass: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Sean Liao \u003csean@liao.dev\u003e\n" }, { "commit": "357ea4a5418cb457db33ccd168e28f68e075eba0", "tree": "54477282e9c534d00b2ddef43bbc43e675fd8242", "parents": [ "1ea760651e09004683cbcb231ee0ab504bc87919" ], "author": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Tue Jan 14 16:22:55 2025 +0000" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Wed May 14 10:27:51 2025 -0700" }, "message": "action.yml: specify cache-dependency-path\n\nAlso, update the documentation.\n\nFixes golang/go#70027\n\nChange-Id: I55a45799e89c9073a43e242df9d0ae64db24dffe\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/642635\nReviewed-by: Sean Liao \u003csean@liao.dev\u003e\nCommit-Queue: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n" }, { "commit": "1ea760651e09004683cbcb231ee0ab504bc87919", "tree": "516866aae123d53fc5386cc7372c22f75265d5f0", "parents": [ "f03a9d4ce4ca31ed6f289906dad4f34c2ac9a23b" ], "author": { "name": "Kir Kolyshkin", "email": "kolyshkin@gmail.com", "time": "Tue May 06 16:43:25 2025 -0700" }, "committer": { "name": "Sean Liao", "email": "sean@liao.dev", "time": "Mon May 12 12:37:08 2025 -0700" }, "message": "action.yml: update actions to fix caching issue\n\nWhen the action is run, it complains when trying to save the cache:\n\n\u003e Failed to save: Unable to reserve cache with key\n\u003e setup-go-Linux-ubuntu24-go-1.23.0-xxxx\n\u003e another job may be creating this cache. More details: This legacy\n\u003e service is shutting down, effective April 15, 2025. Migrate to the new\n\u003e service ASAP. For more information: https://gh.io/gha-cache-sunset\n\nThis is caused by using an obsoleted version of actions/setup-go,\nwhich is being fixed in v5.3.0 [1].\n\nThere were other important actions/setup-go updates as well (such as\nincluding the arch in the cache key in v5.1.0 [2]. For complete changes,\nsee https://github.com/actions/setup-go/compare/v5.0.0...v5.4.0 and\nhttps://github.com/actions/setup-go/releases.\n\nUpdate actions/checkout as well; for changes, see\nhttps://github.com/actions/checkout/compare/v4.1.1...v4.2.2 and\nhttps://github.com/actions/checkout/releases.\n\nFixes golang/go#73616\n\n[1]: https://github.com/actions/setup-go/releases/tag/v5.3.0\n[2]: https://github.com/actions/setup-go/releases/tag/v5.1.0\nChange-Id: I124d20136cc34f06ac5dad7b0c535fdc3ad0fa0e\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/670318\nTryBot-Bypass: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: Sean Liao \u003csean@liao.dev\u003e\nCommit-Queue: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nReviewed-by: Tobias Klauser \u003ctobias.klauser@gmail.com\u003e\nCommit-Queue: Kirill Kolyshkin \u003ckolyshkin@gmail.com\u003e\nRun-TryBot: Kirill Kolyshkin \u003ckolyshkin@gmail.com\u003e\nReviewed-by: Michael Knyszek \u003cmknyszek@google.com\u003e\n" }, { "commit": "f03a9d4ce4ca31ed6f289906dad4f34c2ac9a23b", "tree": "dce714500c1f667f0c782127923e815c231c3782", "parents": [ "b625fbe08f3bccbe446d94fbf87fcc875a4f50ee" ], "author": { "name": "Oleksandr Redko", "email": "oleksandr.red+github@gmail.com", "time": "Fri Feb 07 17:06:58 2025 +0200" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Mon May 12 07:45:07 2025 -0700" }, "message": "README.md: fix typo\n\nChange-Id: I47ebffae76669aeea33ae4850eb7c5da0fad41cf\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/647635\nReviewed-by: Michael Knyszek \u003cmknyszek@google.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Bypass: Sean Liao \u003csean@liao.dev\u003e\nReviewed-by: Sean Liao \u003csean@liao.dev\u003e\n" }, { "commit": "b625fbe08f3bccbe446d94fbf87fcc875a4f50ee", "tree": "2351e16224da669ce9050945f9f5152ea8ff6126", "parents": [ "dd0578b371c987f96d1185abb54344b44352bd58" ], "author": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Fri Sep 27 20:08:20 2024 +0000" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Tue Oct 01 14:47:37 2024 +0000" }, "message": "action.yml: make sure the latest Go version is default\n\nDue to some confusion on the contract of one of the dependencies,\ngovulncheck-action would not by default try to download the newest go\nversion when one was present. This would sometimes even break the action\nrun due to a seemingly another issue with the dependency. This change\nshould fix both issues.\n\nFixes golang/go#69597\n\nChange-Id: I51a21aad2daafc3984866051f91cf9339bb540e2\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/616435\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n" }, { "commit": "dd0578b371c987f96d1185abb54344b44352bd58", "tree": "fdd3a21e44813afc92aab52317b269f9da880885", "parents": [ "3a32958c2706f7048305d5a2e53633d7e37e97d0" ], "author": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Tue May 28 14:56:32 2024 +0000" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Wed May 29 13:07:46 2024 +0000" }, "message": "all: provide options to specify action output\n\nThis includes the output format and the file to which the output should\nbe saved.\n\nChange-Id: Iebbc4ecf38f669de441900c4d1ee3f2b83d1c6a9\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/588735\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nCommit-Queue: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n" }, { "commit": "3a32958c2706f7048305d5a2e53633d7e37e97d0", "tree": "0f3be2dae3f22e2d358a2ffc98b7d4036b6dea04", "parents": [ "7da72f730e37eeaad891fcff0a532d27ed737cd4" ], "author": { "name": "Tobias Klauser", "email": "tklauser@distanz.ch", "time": "Tue Jan 09 11:27:23 2024 +0100" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Tue Feb 06 15:52:01 2024 +0000" }, "message": "action.yml: update actions to latest versions\n\nUpdate actions/checkout v3 -\u003e 4.1.1, see\nhttps://github.com/actions/checkout/compare/v3...v4.1.1 for changes.\n\nUpdate actions/setup-go v4.0.0 -\u003e v5.0.0, see\nhttps://github.com/actions/setup-go/compare/v4.0.0...v5.0.0 for changes.\n\nChange-Id: I8b37eb73efb3d2103e421fbbc29f32b5df8c3037\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/554895\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nCommit-Queue: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nCommit-Queue: Tobias Klauser \u003ctobias.klauser@gmail.com\u003e\n" }, { "commit": "7da72f730e37eeaad891fcff0a532d27ed737cd4", "tree": "72d79a4161ac4732008673040b150ed6b3206d95", "parents": [ "b56219ac100e6291bc18a40cf6453030b89f111c" ], "author": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Mon Aug 21 15:38:01 2023 -0700" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Thu Aug 24 22:31:14 2023 +0000" }, "message": "all: allow go.mod or go.work Go version to be used\n\nFixes golang/go#61343\n\nChange-Id: I844f3c83a4e8c6859e6e2527867533e363698b30\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/521735\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n" }, { "commit": "b56219ac100e6291bc18a40cf6453030b89f111c", "tree": "67e58d8d4168461161b17c5bc0db413924ea1d78", "parents": [ "5f206a97970d38eb2f93727aa6a7dc4a5eca2f4b" ], "author": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Fri Aug 18 10:31:41 2023 -0700" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Thu Aug 24 21:15:50 2023 +0000" }, "message": "action.yml: provide option to checkout repository\n\nThe repo checkout is enabled by default, but that can lead to some\nissues in case the repo was been checked out earlier and some files are,\nsay, generated. Hence, we make the checkout optional.\n\nFixes golang/go#61409\n\nChange-Id: I9bf37fb66c02ef3aa7347e6d534e150766c28990\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/520935\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n" }, { "commit": "5f206a97970d38eb2f93727aa6a7dc4a5eca2f4b", "tree": "6fbd88e6ee13b818f91a6229b75a3b75ea870d38", "parents": [ "dd3ead030e4f2cf713062f7a3395191802364e13" ], "author": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Wed Aug 16 10:23:15 2023 -0700" }, "committer": { "name": "Zvonimir Pavlinovic", "email": "zpavlinovic@google.com", "time": "Thu Aug 17 18:32:35 2023 +0000" }, "message": "actions.yml: add working directory input\n\nFixes golang/go#61354\n\nChange-Id: If10a7ffcfebdd3542366cc32a543bb59355019d7\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/520175\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n" }, { "commit": "dd3ead030e4f2cf713062f7a3395191802364e13", "tree": "b3012e2e9d581baf4ace2737e0679bf2f07a1b32", "parents": [ "4876574c49676abb67f1c56c5038d32d02b17503" ], "author": { "name": "Julie Qiu", "email": "julie@golang.org", "time": "Thu Jul 13 10:57:53 2023 -0400" }, "committer": { "name": "Julie Qiu", "email": "julieqiu@google.com", "time": "Thu Jul 13 14:59:29 2023 +0000" }, "message": "README.md: update version to v1\n\nChange-Id: Ie615cb2071f9ed3f43e38d1d00230e372634fbb0\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/509355\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\nTryBot-Bypass: Julie Qiu \u003cjulieqiu@google.com\u003e\nReviewed-by: Brandon Kessler \u003cbkessler@google.com\u003e\n" }, { "commit": "4876574c49676abb67f1c56c5038d32d02b17503", "tree": "d8217be673f2dfe3385c028f5e29609944a2ba0a", "parents": [ "a46a9b37e1aeb4ccad626d440f1d51246f6b0ba6" ], "author": { "name": "Brandon Kessler", "email": "bkessler@google.com", "time": "Thu Jul 06 10:38:39 2023 -0400" }, "committer": { "name": "Brandon Kessler", "email": "bkessler@google.com", "time": "Thu Jul 06 17:02:59 2023 +0000" }, "message": "Updates the README to specify the leatest version of the GitHub Action\n\nChange-Id: Id46b55c5e52fa65cb33cb6f0558b7236cb7b3418\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/507756\nTryBot-Bypass: Brandon Kessler \u003cbkessler@google.com\u003e\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\n" }, { "commit": "a46a9b37e1aeb4ccad626d440f1d51246f6b0ba6", "tree": "b0bc2054fd11ce8c9f656f0d9523aa2810d2305d", "parents": [ "87b6cbd06fab50eb38d039e4ba501245df0029c3" ], "author": { "name": "Brandon Kessler", "email": "bkessler@google.com", "time": "Mon Jun 12 15:13:57 2023 -0400" }, "committer": { "name": "Brandon Kessler", "email": "bkessler@google.com", "time": "Tue Jun 20 13:23:42 2023 +0000" }, "message": "govulncheck-action: add check-latest and cache options\n\nAdd options for check-latest and cache as optional inputs for setup-go.\n\nFixes golang/go#60704\n\nChange-Id: I72325a5f6d8282a9b000fa24e91da65574f05193\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/502538\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\nTryBot-Bypass: Brandon Kessler \u003cbkessler@google.com\u003e\n" }, { "commit": "87b6cbd06fab50eb38d039e4ba501245df0029c3", "tree": "ca80232e44cc4f98ed27f0d4886ce3a61dcc7af5", "parents": [ "e03a9cb1749c40f9034d4a77067c376014c58073" ], "author": { "name": "Julie Qiu", "email": "julie@golang.org", "time": "Sun May 21 21:00:42 2023 -0400" }, "committer": { "name": "Julie Qiu", "email": "julieqiu@google.com", "time": "Mon May 22 16:44:56 2023 +0000" }, "message": "README.md: update content\n\nChange-Id: I5184d02e9fd93557f66e5f8918d5269873a54794\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/496878\nReviewed-by: Brandon Kessler \u003cbkessler@google.com\u003e\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\nTryBot-Bypass: Julie Qiu \u003cjulieqiu@google.com\u003e\nReviewed-by: Julie Qiu \u003cjulie@golang.org\u003e\n" }, { "commit": "e03a9cb1749c40f9034d4a77067c376014c58073", "tree": "fffcec50cc9da25115a798f91d825e089c3046de", "parents": [ "714f1ec27c6d48f1b447bdcdaa870beb6a68985e" ], "author": { "name": "Julie Qiu", "email": "julie@golang.org", "time": "Sun May 21 21:01:14 2023 -0400" }, "committer": { "name": "Julie Qiu", "email": "julieqiu@google.com", "time": "Mon May 22 16:36:50 2023 +0000" }, "message": "README.md: wrap text\n\nChange-Id: Ic440b5168ecf73bf739373bcbbc3af36273b9951\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/496877\nReviewed-by: Brandon Kessler \u003cbkessler@google.com\u003e\nReviewed-by: Julie Qiu \u003cjulie@golang.org\u003e\nTryBot-Bypass: Julie Qiu \u003cjulie@golang.org\u003e\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\n" }, { "commit": "714f1ec27c6d48f1b447bdcdaa870beb6a68985e", "tree": "869e2ae3a444bbca1cd963a921eee8459a075113", "parents": [ "36fe93a417951e0be24d0bcfd3a712152d6f91af" ], "author": { "name": "Julie Qiu", "email": "julie@golang.org", "time": "Sun May 21 20:47:00 2023 -0400" }, "committer": { "name": "Julie Qiu", "email": "julieqiu@google.com", "time": "Mon May 22 16:36:38 2023 +0000" }, "message": "govulncheck-action: rename to golang-govulncheck-action\n\nRename action to golang-govulncheck-action, since govulncheck-action and\ngovulncheck are already taken on the GitHub marketplace.\n\nChange-Id: I4f329b8dce27d9ecef0f78650579e7ba74997252\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/496876\nTryBot-Bypass: Julie Qiu \u003cjulie@golang.org\u003e\nReviewed-by: Brandon Kessler \u003cbkessler@google.com\u003e\nReviewed-by: Julie Qiu \u003cjulie@golang.org\u003e\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\n" }, { "commit": "36fe93a417951e0be24d0bcfd3a712152d6f91af", "tree": "aa4d1a99cfe3774f1dc3006fe8371fb673dc557e", "parents": [ "a197ae39e55573b3a0e752b9bd72f457a458adf6" ], "author": { "name": "Brandon Kessler", "email": "bkessler@google.com", "time": "Thu May 11 12:09:18 2023 -0400" }, "committer": { "name": "Brandon Kessler", "email": "bkessler@google.com", "time": "Mon May 15 17:18:47 2023 +0000" }, "message": "govulncheck-action: Adding the initial version of the govulncheck github action \u0026 README\n\nChange-Id: I1e5ea64b91d6f10147c0632441df189de5e486b3\nReviewed-on: https://go-review.googlesource.com/c/govulncheck-action/+/494038\nReviewed-by: Brandon Kessler \u003cbkessler@google.com\u003e\nAuto-Submit: Brandon Kessler \u003cbkessler@google.com\u003e\nTryBot-Bypass: Brandon Kessler \u003cbkessler@google.com\u003e\nReviewed-by: Julie Qiu \u003cjulieqiu@google.com\u003e\nRun-TryBot: Brandon Kessler \u003cbkessler@google.com\u003e\n" }, { "commit": "a197ae39e55573b3a0e752b9bd72f457a458adf6", "tree": "71ad4850cb0c119a24366b9915d34d147c938d8d", "parents": [], "author": { "name": "Carlos Amedee", "email": "carlos@golang.org", "time": "Thu May 04 15:30:51 2023 -0400" }, "committer": { "name": "Carlos Amedee", "email": "carlos@golang.org", "time": "Thu May 04 15:30:51 2023 -0400" }, "message": "initial commit\n" } ] }